Complete feed
Recently updated
Advisories the vendor has revised
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Low OTP Invalidation Missing Upon Regeneration
OTP Invalidation Missing Upon Regeneration
Low [CVE-2025-14847] MongoBleed: MongoDB Memory Disclosure Vulnerability (CVE-2025-14847)
MongoBleed: MongoDB Memory Disclosure Vulnerability (CVE-2025-14847)
Low Stored Cross-Site Scripting Vulnerability
Stored Cross-Site Scripting Vulnerability
Medium [CVE-2025-57791] Argument Injection Vulnerability in CommServe
Argument Injection Vulnerability in CommServe
Medium [CVE-2025-57789] Vulnerability in Initial Administrator Login Process
Vulnerability in Initial Administrator Login Process
Critical [CVE-2025-34028] Vulnerability in Commvault Command Center Installation
Vulnerability in Commvault Command Center Installation
High [CVE-2025-3928] Critical Webserver Vulnerability
CVE.Org link: CVE-2025-3928 Save as PDF A vulnerability has been identified and remediated in all supported versions of the Commvault software. Webservers can be compromised through bad actors creating and executing webshells. Exploiting this vulnerability requires a bad actor to have authenticated user credentials within the Commvault Software environment. Unauthenticated access is not exploitable. For software customers, this means your environment must be: (i) accessible via the internet, (ii) compromised through an unrelated avenue, and (iii) accessed leveraging legitimate user credentials.
Medium DLL Injection Vulnerability in the Software Installation Path
DLL Injection Vulnerability in the Software Installation Path
Critical SQL Injection and Command Injection Advisory
SQL Injection and Command Injection Advisory
Medium Security vulnerability in Windows access nodes that are used for file server data protection
Security vulnerability in Windows access nodes that are used for file server data protection
Critical [CVE-2023-46604] Remote Code Execution Vulnerability in Apache ActiveMQ
Remote Code Execution Vulnerability in Apache ActiveMQ
Critical [CVE-2023-4863] Libwebp Vulnerability
CVE.Org link: CVE-2023-4863 Save as PDF
Critical [CVE-2021-4104 +4] Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products
Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products
High [CVE-2021-4034] Local Privilege Escalation Vulnerability in Polkit's pkexec Utility
Local Privilege Escalation Vulnerability in Polkit's pkexec Utility
Medium Authentication Bypass Vulnerabilities on CVWebService Endpoint
Authentication Bypass Vulnerabilities on CVWebService Endpoint